Publications

Publications, Presentations, and Workshops about CASE.

Title Description Type Source Date Published
Leveraging CybOX to Standardize Representation and Exchange of Digital Forensic Information Origins of CASE from the Digital Forensic Analysis eXpression (DFAX) are provided at DFRWS EU 2015. Presentation DFRWS EU 2015-03-23
Leveraging CybOX to Standardize Representation and Exchange of Digital Forensic Information This work summarizes the strengths and weaknesses of prior schemas, and defines an open-source schema called DFAX and underlying UCO ontology for representing and exchanging digital forensic information. Publication Digital Investigation Journal 2015-03-01
Using Standardization and Ontology to Enhance Data Protection and Intelligent Analysis of Electronic Evidence CASE includes data marking to support restricting access to privileged, proprietary, and personal in criminal and civil matters, controlling disclosure of information in regulatory compliance inquiries, and enable vendors to restrict use of data that is covered under license agreements. Presentation International Conference on Artificial Intellgience 2017-06-12
Pulling It Together Enabling Interoperability of Digital Forensic Systems Using a Standard Representation and Supporting API Presentation DFRWS 2017-08-06
The Evolution of Expressing and Exchanging Cyber-Investigation Information in a Standardized Form The CASE specification language and UCO ontology are a rational progression from the foundational work on Digital Forensic Analysis eXpression (DFAX). Publication Handling and Exchanging Electronic Evidence Across Europe 2018-06-27
Pulling It Together Enabling Interoperability of Digital Forensic Systems Using a Standard Representation and Supporting API Presentation EU Evidence Project 2016-09-29
Advancing coordinated cyber-investigations and tool interoperability using a community developed specification language The foundations of CASE are provided in "Advancing coordinated cyber-investigations and tool interoperability using a community developed specification language," Journal of Digital Investigation (Issue 22, Sept 2017). Publication Digital Investigation Journal 2017-09-22
Corrigendum to ‘Advancing coordinated cyber-investigations and tool interoperability using a community developed specification language’ This corrigendum addresses several corrections, clarifications, and updates to the JSON CASE example provided in this paper. Publication Digital Investigation Journal 2018-11-28
Standardization of file recovery classification and authentication In digital forensic investigations, the notions of "recovered content" versus "deleted content" can be more specifically expressed as various degrees of recoverability. Publication Digital Investigation Journal 2019-07-20